Solved

Possible to pull email log from a specific date?

Posted on 2008-06-11
3
269 Views
Last Modified: 2010-08-05
my supervisor was notified that a *bad* email went out on june 7.  is there any way to pull a log of all outgoing emails from our exchange 2003 server from a specific date?  i'm completely in the dark here, and wouldn't even know where to begin.
0
Comment
Question by:ImpactMikeJ
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 58

Accepted Solution

by:
tigermatt earned 500 total points
ID: 21762270
If you had it enabled at the time, then Message Tracking is the correct way to retrieve this information. You can use the Message Tracking Center to search the Exchange log files for June 7th 00:00:00 to June 8th 00:00:00 for all emails. That will return a list of all emails - sent and received - which passed through Exchange on that day.

A guide on the procedure can be found at http://www.amset.info/exchange/message-tracking.asp. If you don't currently have it enabled when you follow the procedure to enable it, enabling it now will not be any good for you, since it cannot pull logs retrospectively. Furthermore if the time the log files are kept for is less than 4 days (obviously it's 4 days since June 7th) then the log will have been deleted, and again, you cannot go back.

If you've got it enabled and the log file is still there, then this should work. Easiest way is to try the procedure for finding a message and see if you get any results!

-tigermatt
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
Check out this step-by-step guide for using the newly updated Experts Exchange mobile app—released on May 30.
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question